summaryrefslogtreecommitdiff
path: root/.gitlab-ci.yml
blob: 63b9cb3c3ca7bbc0d3d17810fc72bad63abcec40 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
# When using dind, it's wise to use the overlayfs driver for
# improved performance.
variables:
  DOCKER_DRIVER: overlay2
  GIT_DEPTH: "2"
  GIT_STRATEGY: fetch
  TMP_IMAGE: $CI_REGISTRY_IMAGE:$CI_COMMIT_SHA

include:
  - template: Container-Scanning.gitlab-ci.yml
  - template: Dependency-Scanning.gitlab-ci.yml
  - template: Jobs/Code-Quality.gitlab-ci.yml
  - template: License-Scanning.gitlab-ci.yml
  - template: Secret-Detection.gitlab-ci.yml
  - local: .gitlab/deb.yml
  - local: .gitlab/build.yml
  - local: .gitlab/test.yml
  - local: .gitlab/deploy.yml
  - local: .gitlab/maintenance.yml

stages:
  - deb
  - build
  - test
  - deploy
  - maintenance

default:
  image:
    name: $TMP_IMAGE
    entrypoint: [""]
  tags: [gitlab-org]
  retry:
    max: 2

container_scanning:
  variables:
    CI_APPLICATION_REPOSITORY: $CI_REGISTRY_IMAGE # only predefined variables are parameter-expanded (no $TMP_IMAGE)
  needs: ['build-docker-image']

code_quality:
  before_script:
    - rm .rubocop.yml
  services:
    - docker:stable-dind
  tags: [gitlab-org-docker]

dependency_scanning:
  services:
    - docker:stable-dind
  tags: [gitlab-org-docker]
  needs: []

license_scanning:
  image:
    name: $TMP_IMAGE
  before_script:
    - apt-get check
  variables:
    LM_REPORT_VERSION: '2.1'
  needs: ['build-docker-image']
  allow_failure: false